Sandbox::https://github.com/oras-project/rust-oci-client-node/blob/main/deny.toml

Repository navigation

[advisories]

ignore = [

{ id = "RUSTSEC-2023-0071", reason = "rsa side channel attack, no fix exists yet" },

{ id = "RUSTSEC-2026-0173", reason = "proc-macro-error2 is no longer maintained. This is a dependency of oci-spec crate" },

]

[licenses]

version = 2

confidence-threshold = 1.0

# List of explictly allowed licenses

# See https://spdx.org/licenses/ for list of possible licenses

# [possible values: any SPDX 3.11 short identifier (+ optional exception)].

allow = ["Apache-2.0", "BSD-3-Clause", "CDLA-Permissive-2.0", "ISC", "MIT", "Unicode-3.0", "Zlib"]

[[licenses.clarify]]

name = "encoding_rs"

version = "*"

expression = "(Apache-2.0 OR MIT) AND BSD-3-Clause"

license-files = [{ path = "COPYRIGHT", hash = 0x39f8ad31 }]

[[licenses.clarify]]

name = "ring"

expression = "MIT AND ISC AND OpenSSL"

license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]

[bans]

multiple-versions = "allow"